CVE-2018-8153

EPSS 1.12%
Veröffentlicht 09.05.2018 19:29:02
Zuletzt bearbeitet 21.11.2024 04:13:21
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle web requests, aka "Microsoft Exchange Spoofing Vulnerability." This affects Microsoft Exchange Server.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 6

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_8

Microsoft ≫ Exchange Server Version2016 Updatecumulative_update_9

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	1.12%	0.775

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.4	2.8	2.5	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
nvd@nist.gov	5.8	8.6	4.9	AV:N/AC:M/Au:N/C:P/I:P/A:N

CWE-290 Authentication Bypass by Spoofing

This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

http://www.securitytracker.com/id/1040850

Third Party Advisory

VDB Entry

http://www.securityfocus.com/bid/104045

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8153

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-8153

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-8153

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-8153

EUVD